Re: Scanning Win2k with Nessus

On Jan 16, 2007, at 11:53 PM, Beau Nuanes wrote:
> 2)  Disabled "Safe Checks" and "Optimize the test" in NessusClient.

Re-enabled those options.

> 3)  Disabled the *nix related tests since I'm scanning Win2k.

You don't need to do that. Nessus will do that for you.

> 4)  Created a Nessus user on the win2k machines and gave him/her  
> administrative privledges (I'll change this by editing the winreg  
> key once I have this working)

I suggest to keep the administrative privileges, you will have better  
results.

> 5)  Entered the credentials for this user in NessusClient. I tried  
> using hostname\user and just user as the username.

You must just use user as the username. You can optionally put the  
domain name in the domain section.


> My problem is that it appears that I am not attempting to  
> authenticate at all.  The Event viewer on the Win2k machines do not  
> even show an attempted login.  The "Local Checks Failed" plugin is  
> active but does not give me anything in the report.

Select "Save KB on disk" and disable "silent dependencies" and  
relaunch the scan. When it is done, send us the KB and the report  
(privately if you want) so we can find the problem

Could you check your plugins are up to date too ?


Regards,


Nicolas

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus